Leading Insurer Enlists Corvil Security Analytics to Reduce Cyber Risk

Firm cites superior visibility into user and host activity as well as integration into broader cybersecurity ecosystem among differentiators in selecting Corvil

Corvil today announced one of America’s most highly rated financial institutions, with more than $80 billion in assets under management, has implemented Corvil Security Analytics to deliver real-time network traffic visibility, user activity analysis and network forensics to provide more comprehensive cyber threat detection and faster incident response.

For the security team within this financial services firm, ensuring the security and compliance of sensitive data about millions of online customers was a strategic priority.  With more than 80 percent of breaches^[1] stemming from inadvertent or malicious insiders, cyber attacks have the potential to wreak financial, reputational and compliance havoc.  According to reports^[2], the number of cyber attacks against financial services companies has risen by more than 80 percent in the last year.

In recognizing risks posed by its increasingly complex digital operations and looking for greater visibility within the network perimeter, the firm sought to fortify its security fabric. Following a competitive selection process, Corvil was enlisted to help mitigate risks associated with evasive threats. Among these threats are those that can often hide deep within normal network communications and seemingly appropriate user behavior, such as that of the firm’s workforce and thousands of remote representatives.  Providing granular insights and integrated workflows, Corvil enabled faster and more complete investigations and threat hunting, resulting in more effective and efficient end-to-end security operations.

Deployed across multiple data centers, Corvil’s continuous packet capture, analysis, threat-matching, prioritization, and alerting extended the scope of threat detection across the corporate network.  The security team gained uniquely granular and contextualized insights into user and threat activity which drastically minimized the manual effort required for forensic investigation.

Dan Kennedy, Corvil VP and GM, Americas, said: “Incomplete or shallow information about suspicious activity can often be worse than none at all, owing to the tremendous overhead on security teams who must determine whether a breach has occurred and the impact thereof.  We have seen how empowering security analysts, of all levels, with greater insight can reduce attacker dwell times and improve the productivity of even high caliber security teams such as this customer.”

Corvil delivered intelligent integration with other best-of-breed security tools, extending the firm’s protection fabric from the perimeter, across the network, and into endpoints, enabling the firm to:

• Operationalize the use of threat intelligence for faster breach detection
• Streamline and unify file extraction, threat analysis, and perimeter response with a leading next generation firewall provider
• Simplify tracking of attack indicators and processes across the network and within hosts with Carbon Black Cb Response
• Deliver further correlation of events and faster investigation through bidirectional workflows with a leading machine data analytics SIEM platform

Corvil’s combination of unique insight and integration was a key differentiator during the competitive selection process. It enabled faster, more comprehensive response and maximized the value of their security ecosystem.

“The advanced persistent threat landscape coupled with heightened regulatory oversight and stakeholder demands for utmost assurances from those charged with handling their sensitive data have caused cybersecurity technology budgets to surge^[3],” said  David Murray, Corvil Chief Marketing and Business Development Officer. “However a disparate and siloed set of cybersecurity technologies introduces greater levels of complexity to already overburdened security teams.  Time and time again, customers and analysts tell us that solutions designed to participate in a wider security ecosystem of data collection, analytics and policy enforcement are intrinsically more valuable. This latest win demonstrates that our strategy to design interoperable, best-of-breed solutions addresses this pressing market demand.”

Firm cites superior visibility into user and host activity as well as integration into broader cybersecurity ecosystem among differentiators in selecting Corvil

Corvil today announced one of America’s most highly rated financial institutions, with more than $80 billion in assets under management, has implemented Corvil Security Analytics to deliver real-time network traffic visibility, user activity analysis and network forensics to provide more comprehensive cyber threat detection and faster incident response.

For the security team within this financial services firm, ensuring the security and compliance of sensitive data about millions of online customers was a strategic priority.  With more than 80 percent of breaches^[1] stemming from inadvertent or malicious insiders, cyber attacks have the potential to wreak financial, reputational and compliance havoc.  According to reports^[2], the number of cyber attacks against financial services companies has risen by more than 80 percent in the last year.

In recognizing risks posed by its increasingly complex digital operations and looking for greater visibility within the network perimeter, the firm sought to fortify its security fabric. Following a competitive selection process, Corvil was enlisted to help mitigate risks associated with evasive threats. Among these threats are those that can often hide deep within normal network communications and seemingly appropriate user behavior, such as that of the firm’s workforce and thousands of remote representatives.  Providing granular insights and integrated workflows, Corvil enabled faster and more complete investigations and threat hunting, resulting in more effective and efficient end-to-end security operations.

Deployed across multiple data centers, Corvil’s continuous packet capture, analysis, threat-matching, prioritization, and alerting extended the scope of threat detection across the corporate network.  The security team gained uniquely granular and contextualized insights into user and threat activity which drastically minimized the manual effort required for forensic investigation.

Dan Kennedy, Corvil VP and GM, Americas, said: “Incomplete or shallow information about suspicious activity can often be worse than none at all, owing to the tremendous overhead on security teams who must determine whether a breach has occurred and the impact thereof.  We have seen how empowering security analysts, of all levels, with greater insight can reduce attacker dwell times and improve the productivity of even high caliber security teams such as this customer.”

Corvil delivered intelligent integration with other best-of-breed security tools, extending the firm’s protection fabric from the perimeter, across the network, and into endpoints, enabling the firm to:

• Operationalize the use of threat intelligence for faster breach detection
• Streamline and unify file extraction, threat analysis, and perimeter response with a leading next generation firewall provider
• Simplify tracking of attack indicators and processes across the network and within hosts with Carbon Black Cb Response
• Deliver further correlation of events and faster investigation through bidirectional workflows with a leading machine data analytics SIEM platform

Corvil’s combination of unique insight and integration was a key differentiator during the competitive selection process. It enabled faster, more comprehensive response and maximized the value of their security ecosystem.

“The advanced persistent threat landscape coupled with heightened regulatory oversight and stakeholder demands for utmost assurances from those charged with handling their sensitive data have caused cybersecurity technology budgets to surge^[3],” said  David Murray, Corvil Chief Marketing and Business Development Officer. “However a disparate and siloed set of cybersecurity technologies introduces greater levels of complexity to already overburdened security teams.  Time and time again, customers and analysts tell us that solutions designed to participate in a wider security ecosystem of data collection, analytics and policy enforcement are intrinsically more valuable. This latest win demonstrates that our strategy to design interoperable, best-of-breed solutions addresses this pressing market demand.”